home

spark_minidownloader.exe

Baidu Online Network Technology (Beijing)Co., Ltd

This is a setup program which is used to install the application. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Baidu Online Network Technology (Beijing)Co., Ltd  (signed and verified)

MD5:
88994985cba7368b4b76e01227d7a3c8

SHA-1:
3a6e453f77ce53891e4b555d7b9760364617d9c3

SHA-256:
1fbed840810bd53fa4454df65eb1bfccad98208832e6a8a51095aebdecd679ec

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/26/2024 12:48:45 AM UTC  (today)

File size:
913.2 KB (935,104 bytes)

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
Baidu Online Network Technology (Beijing)Co., Ltd

Authority:
VeriSign, Inc.

Valid from:
4/24/2012 12:00:00 AM

Valid to:
4/24/2015 11:59:59 PM

Subject:
CN="Baidu Online Network Technology (Beijing)Co., Ltd", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Baidu Online Network Technology (Beijing)Co., Ltd", L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3BDB1994B98BBB19AB55A42337FA4F5C

File PE Metadata
Compilation timestamp:
11/8/2013 7:20:50 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:Oe4zOjqm7WyIRG1XA81ZhzC+qiFIUx/R4LJV4jbMNK5WwK5k7GnZ0BBEZJN+OleT:sm7wRhKVA+s2r+gzf6oBPv/O7ML88

Entry address:
0x6EDAA

Entry point:
E8, B2, D3, 00, 00, E9, 89, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 53, 57, 33, FF, 8B, 44, 24, 10, 0B, C0, 7D, 14, 47, 8B, 54, 24, 0C, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 10, 89, 54, 24, 0C, 8B, 44, 24, 18, 0B, C0, 7D, 13, 8B, 54, 24, 14, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 18, 89, 54, 24, 14, 0B, C0, 75, 1B, 8B, 4C, 24, 14, 8B, 44, 24, 10, 33, D2, F7, F1, 8B, 44, 24, 0C, F7, F1, 8B, C2, 33, D2, 4F, 79, 4E, EB, 53, 8B, D8, 8B, 4C, 24, 14, 8B, 54, 24, 10, 8B, 44, 24, 0C, D1, EB...
 
[+]

Code size:
557.5 KB (570,880 bytes)

The file spark_minidownloader.exe has been seen being distributed by the following 16 URLs.

https://dw.uptodown.com/dwn/qP4UAPM8zKKCQqhICQZhdLLinPA_4MXYD8jK1upBuBqjVIv8pvffn1MS4RaZHq3yzAzkv4D2cafACjiSQG4RBz3mp1PYdvCnCxe3QGMRLFEkkyUUCGVFDIHYKac9RlXc/Odh2_IDE4nSwBgyEDJ1URpWtL4Ajw8FSmNJkmp-0as3j14CRHfkvmHj3c95-0107RyGNxu9VMv1Z1cltfVXsGzAs6EQT6DLaLdL3q1mhukUzf9faEUuWX6_CmLkg4xPB/nwbBm7iQxEK9SbROO7IzXwPsuJvAyfnRhP-IthLjLGYK6dbIQKPR8oa-zxHVGlUs4TCLAsnSVziytdGQ7mw6aZcfe54GMzpaiOn7cILYVCThDRSZTEQ8mWcKig6h92Nr/.../

https://dw.uptodown.com/dwn/oEeMdEgw1cIy6p-pG4HDT278uXfLTaF57FGk1LsXBzxxMGgK2oxdnuotPkLyICtrCUwbiJrs4oufirbcqcmLyAY44ksVp36WGn3NVPDFREvWx-4F80tpThOXjP3CBLwX/X84ctKX9yZe2yrRtckgs1n_8Z5jRfSQBwfRtlML0I3NCxzi7NZCEVlOiwiW_1hcosqoxpvaEjPTz1x-bSQDpaexNLJA3WD8xW5yvZp5W46WJquMs1nRT871JWJlEea7i/Adw52tf42UTH6kTCJ0pIQV6wW9omhbBpR-gzplyHA-3_YGBNiGC05AdAj9QKhmKjY_rIaxs7JN2XMySGVAx9YKlsFCuVc9mreHY7Goxjs43Fjq3E4V-pLPLm93-LrlK1/.../

http://dc734.4shared.com/download/.../Spark_MiniDownloader.exe

https://dw.uptodown.com/dwn/H0pF4ArifvW3vKSQxxXfuLejoHkya2iBZnrZA0k-NgIlHkj63z0mdzgW_xBBYrUDgnuUAQEtYazcIkYXW1fd7ll0U7Q5qyP1D-w7y98vFjUCRomUR8hwkHPLyss08ONo/HteUNChl4BzaFpfTEmtcgxFCLkzv7QYGVyWHZs2P62-_m9pi1t6GJh0fIKPo8PNst3-j7ZE-eBHQMLtG6-HG3r80zhotSi0l4S_odRfmuZai3c6aCbsQSPp12KtJhNEw/rQmOjIpJ6ql9QM7lslEo-85ZB0dOO5I-q7xV-WBUxtoobSSa9x-PLrIMZcGrvwNLsQFGNlmUVCUeJpt3Okuy-Zr4vS0uBO1fRYWh2qQVE8NM2iW5tcZTbRLBzExFFyKg/.../

https://dw.uptodown.com/dwn/oeIedhYmiDgZxaZGL7Gcq0IykbBLlbntkrQ3gh59K2RNEPJe5z8-nWzDwhgc_KcWmTXnQNOXUvr9DBusX34p2alG0q5_XoOBgtxiA_gYvum5rOZicpXD3v3RIx3YGEwx/u_ksbA5PHJiCbnPn3AZG9nvm1-VtrBigc4tCuvtHpJrsdOC9NxLzGJ9wpy_5J8c0saymZL6SCNSeQydVl-yaeuekpD3QH-HxbE_dle6rdhsPjagktQghM2sgSsUjSqI6/AasJr5nSVTzNThVdz5VTRYtmIqtNDLfPqbwXSWyUIaU-qfDR69Prg63CrmSAINxyTmBNhsoKvgsbzy3I9Upn3qQUgzLdoWPqnALlKNSIPPA3nv_BONtgscN2ZjyArku5/.../

https://dw.uptodown.com/dwn/g6D7tGu5prIchuTKNKXF2beuJI8574eBj1SxNoSZWbXf3gUxZWqIg_JVCJKAbw65ADv7VzN-mPV_bxrW6S23PDBEM8BU1JEI0LkWaG8qNsd-urvFA2WWb57OvJpga1pe/lXKcBq-k44qLs3IVqVwOemaLRM-aYULAUsCsP_zp8PjoqwDVPd3FLDPmiN5qhrPlcgjziVXvBL03U9WA3e4LZz7AxyvPsbpZj6jwyxJcbMjzYWLS8R0Buv9_IvUdbsFn/rSIMms9UExXl9qcfKi0SbmaGfBiHw3zydNcVYwIOWIVCkKShOfaIfGi4JMpqPP9EDXzn1kpgz-RW7QaO0-tBXlfGj3iK1_tDbJzDsuiAzZlj42MHnWCPrXWgErGygdpU/.../

https://dw.uptodown.com/dwn/w5NfOOB6NsbZp7BNOGcjSkyBvfbF55uQ6nW4h38Hju9RfeDfrIev2fwbBfWnZlA8Z3mbzMSQXxY4TgNqCljQBRGetwX-tmYSZD_dH0sX7F8jswRZti51tsr63063Irdx/78TGFZlnLpsfZRk3MIu6Scuyk4CCoeCBO-SkTRUFROmE-m4yfqGETzYqCJQ2WuXUWdPpe_UrZclciOzbYj_oiHuTwo4EiGXjL-19qXZU1_5NhJRTzt10moln7L0XxkWO/4cHR9LeYnZk4TuRmNfvFNrFSVpfaJqHvUOlMYIt7xBYdtdedeXt_UwIs9Lvpy5t-TqCwN4EMLnm774xaLoiM8rrRxw1zOc3-3oveM_RqfFSW12J9rzfo-12jRoU7ACY4/.../

http://br.browser.baidu.com/.../package.exe

https://dw.uptodown.com/dwn/OoQhqtneUiul-MHE2BIQQNH3PDL406ex34EmZtQmwlkO_Ub2K-IwWX5mwyLIBdtGU70oVpkdc0yhHMkwreApC1SFXL0h8iIryGmI9P3-s3QzY65pK_QejREETISfT0Os/ZYSta7veDgoyiH8JOnfxHmCaEV5F2oMzoY7A_vuJqswDKsmShCnhMybKnUQ35T8y_3HE_tO_CEN6Jvc6U7oAoHDnbJB0HRn0Jorgmf5mYSW4mtalnIE0JfijVi0e-c78/NzP9G5VH7EOV4bKJN2Z0-RgI2QUw8cnSXAlGL6sg76VfeA1A22adAkTKg-e4O3geBFIDWosOOaxg8tjws5l-3zmYq_KYD1K6zHTl1mPgdD9ZrocqAMBCN8eG1hQyeDww/.../

https://mega.nz/temporary/.../9AlEUBiD

https://mega.co.nz/temporary/.../9AlEUBiD

http://th.browser.baidu.com/.../package.exe

http://dl-vip.browser.baidu.com/.../Spark_MiniDownloader.exe

http://eg.browser.baidu.com/.../package.exe

http://dl.cdn.chip.de/downloads/.../Spark_MiniDownloader-26.3.exe

http://en.browser.baidu.com/.../package.exe

Scan spark_minidownloader.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.